Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GkrHRl5Png9WMu9Dmxy5sG9H1Q8.roa
File: GkrHRl5Png9WMu9Dmxy5sG9H1Q8.roa (raw, json)
Hash identifier: EF5qGdwhdt/ywYc66U+RAboeG0Jmyeza7REj72FInxY=
Subject key identifier: 1A:4A:C7:46:5E:4F:9E:0F:56:32:EF:43:9B:1C:B9:B0:6F:47:D5:0F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0198C649220B307C2FB54C235D27688F2D29
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GkrHRl5Png9WMu9Dmxy5sG9H1Q8.roa
Signing time: Wed 20 Aug 2025 07:02:18 +0000
ROA not before: Wed 20 Aug 2025 07:02:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.47.91.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:49:22:0b:30:7c:2f:b5:4c:23:5d:27:68:8f:2d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 20 07:02:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a4ac7465e4f9e0f5632ef439b1cb9b06f47d50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:12:8f:50:8d:0f:a2:58:f2:c1:85:ae:59:
65:e2:41:f6:8f:96:64:4d:46:b5:98:59:1f:f1:d8:
ba:9b:20:71:aa:c2:e2:91:5a:22:dd:a1:e3:97:69:
b3:89:f5:dc:19:e9:38:9b:95:d3:e5:16:cd:52:a5:
d6:d8:46:f4:ad:a0:03:0c:9c:dc:46:8a:07:4b:0c:
34:5e:93:ff:21:3d:e5:24:f2:e2:73:e8:17:e4:2a:
8d:a6:9b:0e:33:fc:35:85:a6:f9:b6:6d:4a:7b:a1:
46:c2:d3:a1:af:bc:5f:7c:c4:f0:88:5a:7e:7a:f7:
07:6e:ee:13:06:9c:12:7a:d3:fa:4c:e3:fb:62:31:
30:72:39:ce:fe:94:f3:b1:aa:bb:2f:e2:22:12:5f:
59:a6:c6:11:e9:7f:87:c3:9e:72:ca:91:2e:30:d9:
84:92:ec:22:fa:1d:f3:1b:cd:cb:d6:52:6a:3c:47:
24:11:00:04:c8:c2:8a:c2:f9:17:13:c4:c6:72:8b:
e7:30:bc:26:7f:94:cc:4b:1b:c2:f3:8e:cf:74:cc:
b0:c9:36:e5:cb:f4:0f:30:9a:19:ea:eb:67:29:a6:
fe:84:49:23:1f:6a:99:ae:20:64:0d:47:79:2b:b5:
79:f8:50:e3:f3:0d:1b:a9:8f:cd:b0:e1:13:0a:f9:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4A:C7:46:5E:4F:9E:0F:56:32:EF:43:9B:1C:B9:B0:6F:47:D5:0F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GkrHRl5Png9WMu9Dmxy5sG9H1Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.91.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:79:cc:a9:a8:ed:24:48:b6:6e:ee:5c:16:25:d6:8b:eb:0b:
c1:02:4d:dc:8f:fd:3e:95:c7:25:8e:ec:93:c2:cf:b8:8d:cb:
e2:ef:3d:07:8a:3c:f5:ef:9e:b7:b8:7b:4d:da:1a:59:e6:c6:
0c:ae:32:f6:f1:8b:9d:9e:bf:05:62:f3:03:67:75:81:22:02:
06:ef:94:00:de:9f:07:7d:40:e3:a0:99:e5:c7:77:c6:53:5b:
2a:14:bf:99:3a:c1:c3:64:5e:22:5f:06:71:31:a1:73:12:c1:
18:37:e2:60:33:39:13:f8:37:1e:b2:33:63:ae:01:c1:12:b5:
85:25:b6:9e:41:c4:79:3c:03:7f:3a:17:fd:54:86:bb:fd:94:
f1:25:3f:d2:87:ba:ee:e3:e5:d7:b6:50:a5:6c:76:3b:3e:53:
31:60:26:38:4d:52:6c:a0:ad:5a:27:87:b7:42:72:55:93:48:
d4:ac:58:9d:32:2c:aa:15:5f:91:8a:27:90:de:ea:81:cf:6b:
9c:d4:90:37:e2:bc:e8:f5:99:36:2f:cc:a8:66:14:30:93:fb:
69:ea:fd:01:41:27:22:24:b2:e3:1f:42:d7:21:23:7f:80:48:
15:c9:f7:ba:fc:fc:ec:a5:ae:fa:d4:bb:f8:3a:b2:45:5e:a8:
2d:c5:8b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:22 2025 by rpki-client